10/B62705 



New PCT National Phase Application 

Docket No. 32860-000969 /US 

iAP2e m^^ m/m 2 9 dec zoos 

SUBSTITUTE SPECIFICATION 



DEVICE AND METHOD FOR PARAMETERIZABLE CONTROIiLING 

[0001] This application is the national phase under 35 
U.S.C. § 371 of PCT International Application No. 
PCT/EP2004/006532 which has an International filing date of 
June 17, 2004, which designated the United States of America 
and which claims priority on German Patent Application number 
03014878.7 filed June 30, 2003, the entire contents of which 
are hereby incorporated herein by reference. 



Field 

[0002] The present invention generally relates to a control 
device. For example, it may relate to one having a plurality of 
inputs for respectively receiving an input real value, a 
plurality of outputs for respectively outputting a digital 
output value, a memory for storing setpoint values relating to 
the inputs and outputs, and an allocator for allocating a 
digital output value to one of the digital outputs as a 
function of a comparison of at least one of the input real 
values with a corresponding setpoint value. The present 
invention also generally relates to a corresponding method for 
controlling equipment . 

Baclcground 

[0003] In many applications of control technology, outputs Yj 
are switched on or off as a function of inputs Xi , A control 
device is in this case characterized by the number of outputs 
jmax and the number of inputs imax- With respectively two inputs 
and outputs, i.e. jmax = 2 and imax = 2, sixteen different states 
are in principle conceivable. Correspondingly for controllers 
with eighteen input and outputs, which are widely used in 
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control technology, more than 260,000 different states are 
already possible. 

[0004] In equipment produced to date, all the inputs and 
outputs are evaluated by programmed technology. This, however, 
presents the following disadvantages with an increasing number 
of inputs and outputs (lOs) : There is a great need for ROM and 
RAM. Furthermore, the parameterization table which increases 
exponentially in size requires a very large EEPROM, long 
reading times etc. The large number of states furthermore 
requires very complex parameterization and entails very long 
runtimes. Especially for safety technology, the latter is a 
great problem as regards emergency stop reaction times and 
maxim\im test times for the second fault occurrence time. 

[0005] A controller of this high complexity * is known, for 
example, from Pilz under the reference "PNOZ MULTI". A large 
part of the logic is in this case embodied in hardware. This is 
correspondingly configured extensively owing to redundancy and 
diversity, associated with an SFF level of more than 90% for 
the KAT4 safety standard. Two different controller types are in 
this case used with different firmware. The purpose of this is 
that the faster controller carries out the control functions 
and the slower controller is used for the monitoring. 

[0006] US 4,510,602 discloses a programmable logic device 
which includes a multiplicity of memory devices, instruction 
words and masking words being stored in each of these memory 
devices, the words respectively including a multiplicity of 
bits. By way of a comparator unit and a comparer unit, a 
comparison of a word found on a data bus is carried out with an 
instruction word contained in a memory and a masking word. The 
data bus is in this case connected to inputs and outputs of the 
device. Depending on a comparison carried out, a marker unit 
which transfers a marker signal to outputs of the device is 
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activated by the comparator unit. The individual bits of the 
instruction words and the masking words can take the digital 
states "1" and "0" . 

[0007] US 5,623,680 discloses a state machine, which includes 
a memory in which logic specifications are stored. The changes 
of the outputs are determined by these logic specifications as 
a function of predetermined combinations of input parameters, 
and a change of states is carried out as a function of stored 
logic states of the input parameters. The state specifications 
are in this case formed by separate 8 -bit words and combined 
with an input vector by a logical AND operation. The input 
vectors are in this case undescribed and characterize that by 
that only a single state which is specified by a further vector 
can determine a state transition. 

[0008] For their part, the present Applicant sells safety 
equipment of the Siguard series on the market, which makes do 
with one firmware and one controller type, although master- 
slave operation is necessary in which both controllers execute 
all the control functions and therefore in principle require 
double the runtime compared with the aforementioned equipment. 
This is therefore compensated for by a high-performance 
algorithm. 

[0009] It is an object of at least one embodiment of the 
present invention to provide a less elaborate controller and a 
corresponding method for safety technology. 

[0010] According to at least one embodiment of the invention, 
an object may be achieved by a control device having a 
plurality of inputs for respectively receiving an input real 
value, a plurality of outputs for respectively outputting a 
digital output value, a memory for storing setpoint values 
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relating to the inputs and outputs, and an allocator for 
allocating a digital output value to one of the digital outputs 
as a function of a comparison of at least one of the input real 
values with a corresponding setpoint value. An independence 
state value can be applied to at least one of the setpoint 
values in the memory. Further, the allocation of a digital 
output value to one of the digital outputs can be carried out 
by the allocator independently of the at least one input real 
value whose allocated setpoint value has the independence state 
value. The setpoint values respectively have one of the state 
values 1, 0 and independence state value. In this way, for 
example, it is possible to produce the binary states "TRUE" and 
"FALSE" as well as a state which is insignificant for the 
output result. 

[0011] At least one embodiment of the invention also relates 
to a method for controlling equipment by receiving a plurality 
of input real values, providing setpoint values relating to 
input and outputs, establishing a digital output value as a 
function of a comparison of at least one of the input real 
values with a corresponding one of the setpoint values, 
outputting the digital output value, applying an independence 
state value to at least one of the setpoint values, and 
establishing the digital output value independently of the at 
least one input real value whose allocated setpoint value has 
the independence state value. The setpoint values respectively 
have one of the state values 1, 0 and independence state value. 
In this way, for example, it is possible to produce the binary 
states "TRUE" and "FALSE" as well as a state which is 
insignificant for the output result. 

[0012] In safety technology, the error susceptibility and 
verif lability of the algorithm are of prime importance. If the 
computing outlay is reduced according to at least one 
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embodiment of the invention, a reliable control function can 
therefore be readily achieved in master-slave operation. 

4 

[0013] The control device according to at least one embodiment 
of the invention may include a first evaluator for converting 
input raw values into digital input values for the further 
processing as input real values. This makes it possible, for 
example, to classify analog input signals as an active or 
inactive input. 

[0014] A second evaluator may furthermore be provided in the 
control device, which is connected downstream of the first 
evaluator. This allows the digital input values to be allocated 
to logical input states for the further processing as input 
real values . 

[0015] Preferably, the setpoint values respectively have one 
of the state values 1, 0 and independence state value. In this 
way, for example, it is possible to produce the binary states 
"TRUE" and "FALSE" as well as a state which is insignificant 
for the output result. 

[0016] A plurality of sets of setpoint values may be stored, 
for example, respectively for an output value or set of output 
values in the memory. In this way, a plurality of 
parameterizations can be stored simultaneously in the 
equipment . 

[0017] The control device according to at least one embodiment 
of the invention may have a safety instrx-unent by which the 
equipment to be controlled can be switched to a safety state. 
For example, it may be switched to the safety state if the 
output real values deviate from the corresponding setpoint 
values for more than a predetermined time. In a special example 
of this, the control device may include two controllers which 
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both execute the algorithm and store all fulfilled 
parameterizations as well as the output vector Yj in binary 
form. These stored values are compared in each cycle. If they 
deviate for a time which is longer than a predetermined maximum 
time, then the equipment to be controlled is switched to a safe 
state - 

[0018] The safety device may be optimized by checking the sets 
of setpoint values with a check sum at fixed time intervals. In 
particular, a setpoint value matrix i.e. a fixed 
parameterization, which is stored in the memory, may be secured 
by a cyclic CRC (cyclic redundancy check sum) and verified at 
fixed time intervals in order to discover errors in the matrix 
S or in the memory. In this way, a variable function can be 
checked for errors straightforwardly. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] Embodiments of the present invention will now be 
explained in more detail with the aid of the appended drawings, 
in which: 

FIG 1 shows an outline flow chart of the preprocessing of the 
input real values; and 

FIG 2 shows a logic diagram for the allocation of output states 
according to at least one embodiment of the invention. 

DETAILED DESCRIPTION OF THE EXAMPLE EMBODIMENTS 

[0020] The example embodiments described in detail below 
represent preferred embodiments of the present invention. 

[0021] The outputs Y of the control-safety equipment are the 
result of a switching function H with input X: 
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Y = H(X) 



[0022] The input X, or the plurality of inputs Xi, in this 
case may respectively have the following states independently 
of its/ their function: 



[0023] In control technology, an active output state Yj is 
generally reached for precisely one or very few input state 
vectors. For most of the input state vectors Xi, the output or 
outputs are inactively configured. With uncorrelated inputs, 
i.e. inputs that do not affect one another, for example 
operating selector switch, muting, key switch or the like, 
there are usually at most jmax input state vectors for jmax 
active outputs Yj . 

[0024] If the inputs are correlated, however, then: 



[0025] Number of the active output states 1 

[0026] Here, Zi corresponds to the number of correlations of 
the inputs Xi . In the limiting case of uncorrelated inputs, Z = 
1 since the inputs are then only correlated with themselves. 

[0027] The evaluation of the inputs is carried out in two 
stages according to this example according to at least one 
embodiment of the invention, as indicated in FIG 1. Raw input 
data Ri, for example analog signals or digital signals of any 
level, are first subjected to a physical evaluation. Here, for 
example, the allocation Xi = 1 is made when the corresponding 
input is active, and Xi = 0 when the input is inactive. 



0 ("FALSE") 
Xi = 1 { " TRUE " ) 

D ( " DONTC ARE " ) 



input must be inactive 

input must be active 

input state may be anything 




New PCT National Phase Application 

Docket No. 32860-000969/US 

[0028] In a second step S2 , the digital input values Xi are 
logically evaluated. Each input therefore has a function ID, 
for example IDi = ID_POWERBUTTON . A logical input state or 
function value Fi is assigned to each digital input value X^. 
In the example, Fi = 1 would apply if the power button has been 
actuated successfully, and Fi = 0 would apply if the power 
button has not been actuated or has not been actuated 
successfully . 

[0029] A logical allocation is carried out in the further step 
S3, each real value Fi being compared with a setpoint value Si. 
A corresponding output value Yj results from this comparison. 
Preferably, the controller is configured so that nmax different 
parameter izat ions can be stored in it. Thus, for all the n^ax 
parameterizations, a set of setpoint values Si,n is respectively 
stored. They have the values 

0 ("FALSE") input must be inactive 

Si,n 1 ("TRUE") input must be active 

D ("DONTCARE") input State may be anything 

[0030] FIG 2 shows a flow chart for determining the output 
states Yj. In an initialization step S4, the number of the 
parameter set is put at n = 1 and the output value Yj is put at 
zero. In a further step S5, the logical input states Fi for 
each parameterization n are compared with the allocated 
threshold value Si,n (comparison operator "=="), All the 
comparisons are combined by the AND operator If the 

overall result of the comparisons is "TRUE", then the 
respective output Yj receives the value of the logic operation 
"Yj OR Yj,n" • In this case, Yj,n corresponds to the value stored 
as a setpoint value together with Si,n- 
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[0031] The comparison routine of step S5 is repeated n times 
according to step S6 . After this, the output value assignment 
is ended according to step S7 . 

[0032] For each parameterization, the output Yj with Yj,n = 1 
may then be connected up or activated. Otherwise, the 
respective output Yj is inactive. 

[0033] According to at least one embodiment of the invention, 
not every real value Fi is compared with the corresponding 
setpoint value Si,n in step S5 . Rather, a comparison is only 
carried out if the setpoint value Si,n does not have the value 
"D" . This can avoid a multiplicity of comparison operations. 
The total runtime for determining the output states is 
correspondingly reduced . 

[0034] If the inputs are mutually independent, for example in 
the case of parallel switches, then the number of 
parameter izat ions nmax is equal to the total number of outputs 
jmax. If the inputs are dependent on one another, however, for 
example switches connected in series, then two 
parameterizations may for example be necessary for one output. 

[0035] In a specific example, eleven independent inputs are 
applied to the controller in order to control four outputs. 
Accordingly, four different parameterizations must be stored in 
the controller. 

[0036] Example embodiments being thus described, it will be 
obvious that the same may be varied in many ways. Such 
variations are not to be regarded as a departure from the 
spirit and scope of the present invention, and all such 
modifications as would be obvious to one skilled in the art are 
intended to be included within the scope of the following 
claims . 
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